hxxps://anydesk[.]com/

Analysis

max time kernel
47s
max time network
86s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
28-03-2024 12:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://anydesk.com/

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

Processes:

firefox

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	gmain	1492
Changes the process name, possibly in an attempt to hide itself	gdbus	1499
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1502
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1504
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1504
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1504
Changes the process name, possibly in an attempt to hide itself	Timer	1522
Changes the process name, possibly in an attempt to hide itself	Timer	1522
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1524
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1524
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1525
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1525
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1527
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1526
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1527
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1526
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1529
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1529
Changes the process name, possibly in an attempt to hide itself	pool-firefox	1531
Changes the process name, possibly in an attempt to hide itself	pool-firefox	1530
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1533
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1533
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1546
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1546
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	1584
Changes the process name, possibly in an attempt to hide itself	Cookie	1585
Changes the process name, possibly in an attempt to hide itself	Cookie	1585
Changes the process name, possibly in an attempt to hide itself	glxtest:disk$0	1602
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1655
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1655
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	1662
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	1661
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1678
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1678
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1728
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1728
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1901
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1901
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1906
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1906
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1910
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1910
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	1909
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1911
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1911
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1913
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	1912
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1913
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	1915
Changes the process name, possibly in an attempt to hide itself	MainThread	1912	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1955
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1955
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1955
Changes the process name, possibly in an attempt to hide itself	Socket Process	1912	firefox
Changes the process name, possibly in an attempt to hide itself	FSBroker1912	1957
Changes the process name, possibly in an attempt to hide itself	FSBroker1912	1957
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1958
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1958
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1956
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1956
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1959
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1959
Changes the process name, possibly in an attempt to hide itself	Timer	1960
Changes the process name, possibly in an attempt to hide itself	Timer	1960

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

Processes:

firefox

description	ioc
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/ExperimentStoreData.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionCheckpoints.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/addons.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/pkcs11.txt	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-wal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/extension-settings.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite-wal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/compatibility.ini	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cookies.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/thumbnails
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite-wal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/prefs.js	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/permissions.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/key4.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore-backups/recovery.bak
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/downloads.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/default
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore.jsonlz4
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/content-prefs.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore-backups/previous.js
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/logins-backup.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/permissions.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore-backups/recovery.js
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/protections.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/extension-preferences.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/ls-archive.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/key4.db	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/temporary
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/ls-archive.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/times.json
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore-backups/previous.jsonlz4
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/search.json.mozlz4
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/extensions	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore.js
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/protections.sqlite
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/addonStartup.json.lz4	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/system-extensions	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/cookies.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/handlers.json	firefox
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/sessionstore-backups/recovery.jsonlz4
File opened for reading	/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-journal

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc

File opened for reading /proc/cpuinfo

description	ioc
File opened for reading	/proc/cpuinfo

Reads CPU attributes 1 TTPs 11 IoCs

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc
File opened for reading	/sys/devices/system/cpu/online
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
File opened for reading	/sys/devices/system/cpu/present
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox

Enumerates kernel/hardware configuration 1 TTPs 64 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

glxtestfirefoxgvfs-gphoto2-volume-monitorgvfs-mtp-volume-monitorfirefoxfirefoxfirefox

description	ioc	process
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/irq	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq	glxtest
File opened for reading	/sys/devices/system/cpu	glxtest
File opened for reading	/sys/bus/pci/devices	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/usb/devices	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-0:1.0/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq	glxtest
File opened for reading	/sys/bus	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/usb/devices	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-0:1.0/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/class	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class	glxtest
File opened for reading	/sys/class	gvfs-mtp-volume-monitor
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/irq	glxtest

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

firefoxgnome-keyring-daemonxdg-desktop-portal-gtkfirefoxgvfsd-trashgvfs-udisks2-volume-monitorxdg-document-portalgoa-daemonfirefoxfirefoxgvfs-goa-volume-monitordconf-servicedbus-daemongvfs-afc-volume-monitorglxtestgvfsd-fusefirefoxgoa-identity-service

description	ioc
File opened for reading	/proc/1467/cmdline
File opened for reading	/proc/self/fd/10	firefox
File opened for reading	/proc/filesystems	gnome-keyring-daemon
File opened for reading	/proc/2232/status	gnome-keyring-daemon
File opened for reading	/proc/1973/cmdline
File opened for reading	/proc/1995/cmdline
File opened for reading	/proc/2253/cmdline
File opened for reading	/proc/self/fd/42	firefox
File opened for reading	/proc/filesystems	xdg-desktop-portal-gtk
File opened for reading	/proc/self/fd/41	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	gvfsd-trash
File opened for reading	/proc/2059/smaps
File opened for reading	/proc/2001/cmdline
File opened for reading	/proc/2240/cgroup	gvfs-udisks2-volume-monitor
File opened for reading	/proc/2024/cmdline
File opened for reading	/proc/2033/smaps
File opened for reading	/proc/mounts
File opened for reading	/proc/self/fd/51	firefox
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/self/task/2142/stat
File opened for reading	/proc/filesystems	goa-daemon
File opened for reading	/proc/self/fd/113	firefox
File opened for reading	/proc/1/cgroup	gvfs-udisks2-volume-monitor
File opened for reading	/proc/self/fd/44	firefox
File opened for reading	/proc/self/fd/48	firefox
File opened for reading	/proc/self/fd/49	firefox
File opened for reading	/proc/self/task/2086/stat
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/47	firefox
File opened for reading	/proc/2033/statm
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/filesystems	gvfs-goa-volume-monitor
File opened for reading	/proc/cmdline	dconf-service
File opened for reading	/proc/self/fd/87	firefox
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/self/fd/94	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/self/task/1919/stat
File opened for reading	/proc/filesystems	gvfs-afc-volume-monitor
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/self/fd/30	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/1467/root
File opened for reading	/proc/2240/cmdline
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/filesystems	glxtest
File opened for reading	/proc/2059/statm
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/self/fd/39	firefox
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/sys/kernel/cap_last_cap
File opened for reading	/proc/2138/statm
File opened for reading	/proc/1991/cmdline
File opened for reading	/proc/filesystems	gvfsd-fuse
File opened for reading	/proc/filesystems	dconf-service
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/2263/cmdline
File opened for reading	/proc/filesystems	goa-identity-service
File opened for reading	/proc/self/fd/43	firefox
File opened for reading	/proc/1982/cmdline
File opened for reading	/proc/self/fd/74	firefox

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

firefox

description ioc process

File opened for modification /tmp/firefox/.parentlock firefox

description	ioc	process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/firefox
firefox -new-tab https://anydesk.com/
1⤵
PID:1467

/usr/bin/which
which /usr/bin/firefox
2⤵
PID:1469

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -new-tab https://anydesk.com/
1⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1467

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1493

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1493

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1493

/usr/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1493

/usr/lib/firefox/glxtest
/usr/lib/firefox/glxtest -f 13
2⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1503

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1962

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1962

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1962

/usr/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
2⤵
PID:1962

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Reads runtime system information
PID:1496

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:1534

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20240108143603 -prefsLen 20252 -prefMapSize 231436 -appDir /usr/lib/firefox/browser "{b723188e-061c-4c52-a252-0bc23ddbca72}" 1467 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Reads runtime system information
PID:1912

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
PID:1973

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:1978

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
PID:1982

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
- Reads runtime system information
PID:1991

/usr/libexec/gvfsd
/usr/libexec/gvfsd
1⤵
PID:1995

/usr/libexec/gvfsd-trash
/usr/libexec/gvfsd-trash --spawner :1.6 /org/gtk/gvfs/exec_spaw/0
2⤵
- Reads runtime system information
PID:2024

/usr/libexec/gvfsd-fuse
/usr/libexec/gvfsd-fuse /root/.cache/gvfs -f -o big_writes
1⤵
- Reads runtime system information
PID:2001

/usr/libexec/dconf-service
/usr/libexec/dconf-service
1⤵
- Reads runtime system information
PID:2016

/usr/bin/nautilus
/usr/bin/nautilus --gapplication-service
1⤵
PID:2021

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 22702 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{337bf6ba-f763-49ec-8f41-44e9fe569641}" 1467 true tab
1⤵
- Reads CPU attributes
PID:2033

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 22454 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{92586ce4-5814-4a1b-b2e9-7c9b16d5282a}" 1467 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2059

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 22836 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{99f0d515-2ee0-4e6f-9621-a96f9a7a524e}" 1467 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2083

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 28846 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{3e0a301f-d34e-4d2d-8041-7a2b56779014}" 1467 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2138

/usr/bin/gnome-keyring-daemon
/usr/bin/gnome-keyring-daemon --start --foreground "--components=secrets"
1⤵
- Reads runtime system information
PID:2232

/usr/libexec/gvfs-udisks2-volume-monitor
/usr/libexec/gvfs-udisks2-volume-monitor
1⤵
- Reads runtime system information
PID:2240

/usr/libexec/gvfs-afc-volume-monitor
/usr/libexec/gvfs-afc-volume-monitor
1⤵
- Reads runtime system information
PID:2246

/usr/libexec/gvfs-mtp-volume-monitor
/usr/libexec/gvfs-mtp-volume-monitor
1⤵
- Enumerates kernel/hardware configuration
PID:2253

/usr/libexec/gvfs-gphoto2-volume-monitor
/usr/libexec/gvfs-gphoto2-volume-monitor
1⤵
- Enumerates kernel/hardware configuration
PID:2258

/usr/libexec/gvfs-goa-volume-monitor
/usr/libexec/gvfs-goa-volume-monitor
1⤵
- Reads runtime system information
PID:2263

/usr/libexec/goa-daemon
/usr/libexec/goa-daemon
1⤵
- Reads runtime system information
PID:2267

/usr/libexec/goa-identity-service
/usr/libexec/goa-identity-service
1⤵
- Reads runtime system information
PID:2274

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user
Filesize
2B

MD5
c4103f122d27677c9db144cae1394a66

SHA1
1489f923c4dca729178b3e3233458550d8dddf29

SHA256
96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7

SHA512
5ea71dc6d0b4f57bf39aadd07c208c35f06cd2bac5fde210397f70de11d439c62ec1cdf3183758865fd387fcea0bada2f6c37a4a17851dd1d78fefe6f204ee54

Download Submit
/root/.cache/dconf/user
Filesize
2B

MD5
bd89b0f8193f8c54fe2f8a873fed1d93

SHA1
dca7f2cb570c1312fdc3befd63016caf2c93d791

SHA256
aed9f5e8dedf580817cc0d9a2c1bba0cfffe9fc607e6caedc8011cfc80fe0dd4

SHA512
bf884ee2b5bbd0c4890eb9e1ee60ab70fda6957707163fc36867a0c794f50fb92f30ac3be19cb2949de954bb3784db7da27ebee4e2be90ef7fcd51ebc54a72ee

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913
Filesize
9KB

MD5
efcc9eb3922a5691f15c4cd3612fe4e6

SHA1
492c8393a42d0acd54a23731c49c3a0325c8cd7e

SHA256
85f2856909dec62d67b30aa1c1ad151a4d06bea8f586b3f803dcc2dd5441c267

SHA512
4f3c1ea33ba1e086250745b35d7ce6d3dde402f235e2d4b60a330f8e1442d2afa546839fae6e10315be8b34f4ab9f7439e6ed0ec1033202909893060433e3b44

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913
Filesize
9KB

MD5
e775e92f4819a368c1480aa9aa5312be

SHA1
81d2265bd89ec31c4692b0c82649ec8bb276cbd2

SHA256
ba0e5f48ebfb9caff36c8a9732955987800fc96b3ba68bbb6a8d83a0f87cf7b6

SHA512
bda5c2003272aec9451763da0d8fb6000aea438368658781e279845f26c75b84277ed2fe2a887056f7456974cfee5f224801abfc6792fc8493441699e898f492

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
4c0629f6e583a5c942ecdcd29f9e0507

SHA1
e082a0bb1955c8d73e510732b4b4e5972ca7c832

SHA256
b3b06103b981db366073e6d5cf7709008b59e74dbd6882539ed9adccb71f9c23

SHA512
84f2afeae0aea329051f65425a34e30e6e04d2b477248edda5c7e2ff445628f0ea2ec9125a22a344f7e0803ae43b2c27c118d606ca597e8ae7c6a222341adf0c

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
eecb3dc51813d0a553469ac89dbed052

SHA1
ea94593802e52f8ce8bc12ae27f3528f16113856

SHA256
3b721a6e1232c5c185be08abffa6a0cadd3267ab5336cb81a1c10ae388e7b81a

SHA512
373f669d73e3239d8d374533767097be7824c185b93c9cd580c11009126ce9fd7c7228a6381946b8e820379db75ce3e60aa7dfecb4284ec51d6d8e86792e886d

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
11KB

MD5
81e1945b94e9991cdfde09ca4239c979

SHA1
e26796e9604d9d0865f1af037c5cafc57db094be

SHA256
548a3ba6a2277494bceb379f41ea5ddfabee052abdf477476618740de14076f3

SHA512
9afb7da89eb40b40823c3506b7408fd22aec933305c630a0f7e8583b88c307715435822903c6a31e834b63a55ba4546d11be47debfb61a66c9bb60f47b260590

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
93ec12f92603d4bf5ec04f3aa388824f

SHA1
92e0555c7430d6e100f2e1831d38c868033ebbf6

SHA256
8ae0109dc69c32a9f541e556514db1df81af40d6bdce2a0b8466f22900693888

SHA512
216acef3f037461382d9825a67f68b54645bcf53461240e99d173e34074177f6f7f6aeea5599c6045960248994fca57930a00fb0027b0224674035d26b3f468e

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
891edd14ca768f0c5432f3a8da634369

SHA1
d351ac239db22b6ce76d34bfa307bf4af200a6d1

SHA256
723f51574050babe0251b4d486551762f7c794d7c11cf080fe4525cf346b34d5

SHA512
518f858524ad70fed0147a9113cb14edac61b0bf8d4d9384ed3f43588b514d0d246a64f4a258f58e15ad479680302b9348fd5e0617627b685145a5f0c44b913f

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
186B

MD5
63eeb92dfaa807247f9a5e026583876a

SHA1
184698abae0541042225398c40995e6540a05d25

SHA256
da83a09490b07c4ce4a5f937d2122212ecf2ae084a640283913462e8673ccb08

SHA512
ad2171e4530828b73cfb64938e87bf8d4bbf0872c64a141fbe7bd16e3779eea48297faac8a62edb36ccaf9c158c0daec29596ed61676b8630559cd45a3a974a9

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/139E50D042ACA32E857B140BB2FE1855F734EBCE
Filesize
122B

MD5
de622b2ebdaf3e07d952f4e135b3277a

SHA1
15cc77c76708d6822a15b2903e76770aec4f08a4

SHA256
7cf210a1e80d52a9756dd9724200631495ba035548e94d9a374067962ac054e4

SHA512
09885ed34eb25bac1433a52205d5c136702cba8be83c25384875e454ab4f279bbe7f9a6dd6d5db6d6f8392181bba32a7e5db536500685b7da6fc1b5b4aa69563

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/139E50D042ACA32E857B140BB2FE1855F734EBCE
Filesize
122B

MD5
1f0ffd83e9b0820f565a21a7cc315f0c

SHA1
3e3f5c4bbdcdad190a57c3567ef94dd7cb15236a

SHA256
bdf3e9d297750a3c5d6f647881fe14fcb0d7b66989bb3a35aad3adf40cec6585

SHA512
d103478b5676016706fcbcba028c0a5099ba179ef4f736cf29901d132ceb10608725c69d8968ecdf18c17758501f161267b7d10c97dd00e88937b58a486930f4

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/139E50D042ACA32E857B140BB2FE1855F734EBCE
Filesize
8KB

MD5
531cf4b27de99aec5da864b795276ad9

SHA1
ac42ce6d867c2622725bfd0d95c1ed401a1bfc64

SHA256
89164395226d8b27b1e9ea9939cca980fbac9c19f24de8f4d538ec2f56a26719

SHA512
117476eca57eb7043dceb62e3b01633aae609a21cba058cbd26d957cc185fdca544684a6a8234dae0725871171e98a7655bd3ccea4a5a7dc1cfd8f5c3f426854

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/15D100FE29AC1933B50DFB20903C95ACBE4FB102
Filesize
19KB

MD5
29c90d6d216567d7455aa1c846c75cad

SHA1
d35f230eafa5b3ba0154e3a39563bab2889887bc

SHA256
f47741e7a3a83d49cac3fc6abf8e415a4e13497f05a735a9de01f38b7403fb64

SHA512
379658c527b1da4a515b4c03402f835b561aeb0123474b1474dd457d40fe7c9d03d01ff1a8c14e0e0cbbc8c22ac08183187b82203ea7985efe32b1db60a3f892

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA
Filesize
9KB

MD5
165352d00f32027e7ad30f78c224c7fd

SHA1
fd59b565e6a352f44f55565da223a9bd0849ffc2

SHA256
ffa043cb4e77d2d38ca597b06fe6c0efba6469e749ce27006c29a7a3317b229e

SHA512
0489f61151f3cb486ab7d1842242c3f0fb018795549728daf40b96f13eea2bff6864a7b9b991ae2f3e0d47dd4b4654ae7e655e690ace7475708df630b6bdb6ae

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA
Filesize
9KB

MD5
fe0e2de2843d0e1384280948d763f1a4

SHA1
9fca0a26d6a61fd1104de020f4bae0bf08ac9768

SHA256
cdae7c086979ae1c59a9065cf089f04356908e1f41c2ec0d5414231fe3527973

SHA512
77499d44a66b91de07ce12a0167ee5c28e1ecd9bed0c4fe4a87e8180514f94aef6d35e46facedeb2cba67bb63fd0366293f2c6d701a299afd65ec32c089a35c5

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365
Filesize
9KB

MD5
7ce2b3ce4813987fc93e0abc06bb3cd3

SHA1
8fb25ef293da757564182dd8fe535cbcede7311c

SHA256
91d5454566165155e8990f18db6d79f55749dd856a85d5e613b74ab43e9b7d9b

SHA512
9cb7cec6ee454c6b01532c8eae74cd98e1732ef5df1ddaa97a5933fdb5ec03197506e6bf1e33622e7de96adafd21715f58807969fd6c7756f31a7fd51bc8c2c6

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
733b60e021b80b91534bdee6c5388435

SHA1
7f0e943bf8e4c331b05343c53a45d5f3e13778f7

SHA256
3b03697ebcc863f6fe988ce9a889a14ad43732497f074af17eb0078874646937

SHA512
05a550bbd3a20582a4d85a2d6e5c8157b566627550844cc2668c3b97059b10bccf9e86650c6651ba3722526c762c0d17b14f3efe8660da3b2952dcd351e05b5a

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
986de008feca367ef23276397e4cf168

SHA1
89b8fdb091e36d078e0c9a8ac78347663a87b7e3

SHA256
d3d880ee61a97a5ec3c616d8d1536a97644385bdac17b96f6f133ad51a4c5934

SHA512
3579aac3f2c3fb912df387ae94193318d9db3ba9fb7d7654604a7057e00ec5bf2ffbd1b2f488d86fe9c7eb04c1d63199f4b3af9b8ad16d551eb7f61327f40f38

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3D274AD488BC788FEDBD82C7BA68AFD1F1A3987D
Filesize
98B

MD5
87249743a176aa54c09829a1d7ada440

SHA1
95acaf7574238e67fa052ad03f98be5be5f951e0

SHA256
17431d83b7f4e042437654a87606cf32188de3005b22e5e265dfb1580acc5aa3

SHA512
874ee086956ed63146e6b755942039e0dddacb2780dcd737ac9838e45caee4b83a29f9d91e6e236e2fde9ed2acc9f1f39c6b3582f369bb6adfe9677dbeeefa8d

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3D274AD488BC788FEDBD82C7BA68AFD1F1A3987D
Filesize
301B

MD5
f3ff04533d3e84d560aeb23e313cef67

SHA1
79f88102f0dea9a60ece80089ae0a10a80ad5fe2

SHA256
6c65cb01948ded592534b0c182c8c277a6e88d6bcf8407c3256d19c150637ca7

SHA512
011cda7bbaef53d54d0a145d3f1bc5e22a8e4339ee497330745f331394bc41cdf5442d168fad18d2f9e5eb208535187e06511f92fe6871df82d5dba844615bc5

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3ED42D7E24BB28B5289BAE48471FDF1A6F27C2B6
Filesize
127B

MD5
d396c33ad803e87614b497a672905e21

SHA1
3dd9e6d7def9e3ec645f1dd7035227329345f688

SHA256
d08848094a51f51ba60329e31e2a93eb9ffda208c723c3abc9d1e7f97f093516

SHA512
85652f1e13d9b91b1461a56f3b87fc474f274734c39ea9c118966b45e4dba22173f6799667a2efc1550c74718759542b22b46fe2407f4173ef4b9f5ad3def8cb

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3ED42D7E24BB28B5289BAE48471FDF1A6F27C2B6
Filesize
25KB

MD5
0392d5169e3cba2c2052d53c88dc3e3a

SHA1
9fc5252a5b6f7e74c7c7802eb6558940770809c8

SHA256
af737113c85cef3fec26a96ecfb1bb86e66fab86ce732286d4850fc1a5b9aaa9

SHA512
fb0587dbc813b092d1cce650dae350743d4935e2a2439db7c1b720fd149e46de1c157b5a16e4495fc89f918e2a5713191778410de5562f16f4aa4524385cf7de

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/3ED42D7E24BB28B5289BAE48471FDF1A6F27C2B6
Filesize
25KB

MD5
8d31cee6fa727929cdcc6ec203a95a13

SHA1
45f6cca547f3824990748c7651a6b7060bcf990c

SHA256
644d5fc7f4ad3278bdadac0645fa7c50afa0840e4794af77b5aa57f50ac4ba75

SHA512
0fc4970e1c573cc51580e0679bd5462d41889fc1b5971d3ad1db0b243cd7cbb2e91e1e94835d4498d9c10d72338d4c584a31a13409989c29a91ef7d9adc5b31b

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
b628bf88c0cb20caa0cf0511891098d2

SHA1
9d0501290cb01d3a628bf80c3d7c99a641a1370c

SHA256
12cf16b73d52471d429ae68a4933bf02478ee5c2ce50cf3bb93fe3290b744326

SHA512
90c69fd1d2cb910f3b35626fc12b5ee94138aa75ea754c27f040d194c827d07bcdf94598b5c870669cf433c31bc9c5ae70307efc2c625662dc00fb1483c1810d

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
4a72010845915d9987cf8f57dde8ffd5

SHA1
f4c32e7da021f4640a07f07a1ed38b5959ae1482

SHA256
6890fa60ef43f8509f898c93eaa0fb845f2e29185e6f0dcf4e110b61dfadd3cb

SHA512
d31d418d823da72ee1d7329f16d6a0439d712768c5751659bd18d23c4979abfd797fa4294404fcd3833914da0c9c8333488001dfe9688f2b2535630a89ee1041

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/5004D630A5033BD99684B890451241D0F3D6525E
Filesize
89B

MD5
7cca007df8ad270862114df71c20c011

SHA1
821f07b1ae52a882d9725fe71caa19c210c7d79c

SHA256
9ae77812aa3a47ea442a52a17742fa93e188e2321579a26fa46562b5d8e093a7

SHA512
50cd843745cf297679ebb6493ed1db1054d013d952cd474e85b5a7c44cd6e6fb1099df89329c6f1f6a42d82b1ac73a10fa822a9168fbe392258fd4055ea929c0

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/5004D630A5033BD99684B890451241D0F3D6525E
Filesize
9KB

MD5
410d39211cfe1de3a0a3ea1bcfec0088

SHA1
07ac29906a0314eeb5b21d66cb8143f2b737bd5a

SHA256
e0ebf941257e69f7f1006ab640d8cf0b37092df92f20c4df4e136125506bb9a4

SHA512
cae117c73d2e8b72e45139eadf8d8f366561cf87767c8df1e613f23fc161b36d582de054f222e7eb7fc58977434fded37f2aa504b552a4e08e72b8941cad3c9b

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/5004D630A5033BD99684B890451241D0F3D6525E
Filesize
9KB

MD5
aeb0348da2267800ff901a36525f347d

SHA1
df2c81f061bf96d99cb4114fe1dfba3ecf957933

SHA256
4c2abb81da45fd7e5dc66c2255ce13e737d467a1a73b59624b52391e4080ab6e

SHA512
af7a96435f79f1bfc81e7b601a917ac15eabd5e4b39d7649a8418bfcf9329cc2ec134858d350d6e061a7de66ae4c09219ed55296ef06d17a296d939cdf27cc98

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/66F1B069C6066DDF1D40D287C782EF7595CCE620
Filesize
49KB

MD5
7cd2a992391c6d527f81dc381dfa10a3

SHA1
0e0eb8ddc2d0537c2e066d0e7b73bdd112daeaa6

SHA256
a0d7ed7024acbe1a616e5a818bb2381cd0cfffeb9542c7742f6de45400455519

SHA512
ab561201e0c3690e365827b602152840212b341fd86e05849b0374c6972ddfb03f4d9150e01e994822a448b7e7e2cc883adaf8a2268b7e7f241aecc218f3b4ab

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
89B

MD5
3ec733c1b11e3889d849557237921da7

SHA1
e94fe668b8b27db9c2e29340fa80d2e4dd2f83ca

SHA256
bf3faf3a1d1331a71678e14845d75b71a5ea3ec135d7fb2b2e1472c9f9d81fee

SHA512
2b72a1cc02d8ef0a833633b87dbe9ab0e8476b7a4a0bf3030b344d44f546ad616ceb8a3ecf80edc73081f0314eb397505a1395424a2479a5b13de610370c801d

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
10KB

MD5
ea78ec73f13906f7397e4e92cbb4ec63

SHA1
2327a90de04c3c709b4c57d4b4f518df951cf9ec

SHA256
35c6ffec2227a032ea46d404e722b3a6492cc996a99c0b7f62e72959455df38b

SHA512
05788f0a5517536f9851be32f789f4ef36c986d41bee3d412ff306d3b154dbc158cc6050b5dda8951d1bc354b102af00da31370bad44583fd7a4d324a4218108

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
10KB

MD5
ee53fa9ad42673f76eee9436378c506c

SHA1
7032be8e1c7fc89b3177bc11ed6cdd07941f79be

SHA256
7ccce9525083dbe3ac340876ff747dfa18d5949fcd7b8170cac098efa9fa2a71

SHA512
4c029e41bec4a29cb5e48e924ed28cba11b90d292ff44c4b78610e67783c6c669cb79c0ebbf959ee155ffc94c7b5210f3a25f8ef7b760c5d124a6abf23c02906

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/7B14469FF42D3B7FD6B84D76BF8072FB5D49F748
Filesize
9KB

MD5
faff6d9581cb34f9e87244efd76b39d6

SHA1
9d0286ab61ff5d673d25c04be54b234136a93169

SHA256
6256876f5f3d018c945dc8b915c4ba13717399dbf91e7b461ec593c65e0b68e1

SHA512
07536c614efe443e5b8ba06c91be2c90047c75f240be6c27ee04ef2c6f80dd0a57cd261f83ee4f707907dce62bf1b2ad3a5b0e41948b14b7d02d4e61d5eec719

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4
Filesize
165B

MD5
f6a2e2f2f893bfc4723728aa5b1ab2bc

SHA1
8c880b6d2a01dfb1c7e99c4c65f4cd09b7ba727d

SHA256
ef7f14640e14b86448470c45aa3307654a73b48dfc752a636ef0519a18502915

SHA512
55e264c53f02d4761630c13ce2baeaad3a2cf99f68303e5fafdfd53442cf2ee758e6159c4c26f669fabf0a3cc3866714dc85675a070e57cf89c785c620d76751

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4
Filesize
10KB

MD5
5f07c1de11ff4b7b04471cef9f14b60a

SHA1
3f80625a741e7c89eb81821b84b6e58adaf94e24

SHA256
51524491e41130b56dfa500a315effdb38c3e53609fb260d492953141e552eff

SHA512
5334b938ee2cf292defabbd62badfabbe3dcd875578ef263dc77912432d4ff29cb789156235b16fa48e60e1aa543aa261aac3c10c41e5f927bdbd08ade3770f1

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78
Filesize
9KB

MD5
65dfae343fe24b21ad846896b9f15c54

SHA1
578cdaf6ebd0ff623d0f856180d721ce62b1e985

SHA256
d9ae5f630c4a613d839f2bfb7e57774653efaf746c169543a56e00dab117dab9

SHA512
e55ac4bd691c4f72734ca74590089e20a9034f8f8c5a5da7210eeb1fa9109b74698efa461d3c91dbedd4945f16a517d7493e1ad63c9a7458a2d25aa8d5c7d5ff

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78
Filesize
9KB

MD5
58f9a3e84d26f69399b5d185eb5aef78

SHA1
a8181eb72038c4ac6cb59c9bc1a13e005d294468

SHA256
d888ec818377bbbb1fd25076e4a7c3bd143eefee48536071e287e297b8e3aea3

SHA512
4d4460fcc62447aef099271fc6d3e4a88c890296ae22b667a89cb2df74004070797b320aecd8956e99581f4cbb935df538fe938e315fa8c1bcef542206bb71f8

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/91C47A244EE2506558755FB3834ACCF3D0F7DD84
Filesize
10KB

MD5
d2afaee1461a4062f0fd14eb4d1cf593

SHA1
919ab67efd7962696219ffcab3a715d69405202b

SHA256
9dabc81255e8815d16abe7630da6d5c54abad07ee9b605ea2fa0d28c3c318244

SHA512
8820fe439dd9c5125459a2a6403955f8c36f645eeea2903ece268665d5fb616f1567fab8c5513359355b953bd5c884428182ba8f3d1c0559bb8b4344e12a1579

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/9D7BC9A551E9BBFFEEF8CB010ED83866908509AA
Filesize
9KB

MD5
ccfca22c0aa0b4cb8cf83057ee73c88d

SHA1
e7757b04a3d7150e40a7bc7ca3914fd15a399ab9

SHA256
1be3a62652b9b47bf790890feb8d69090490c67efffc7def6b512fa77badb961

SHA512
f97f7e0ee91dbd69f55c58a6f3f13bbc78dba46db7b1e195cbf1e248b9f8f9ca2fc5d44b48cf8d93e0fffac758a00f62bbf123f1e4d5872cf4509d9dcbfda2dd

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/A683DC938B17C3CEED2351EBACD87C2B43301011
Filesize
10KB

MD5
983d4747cb62578b34855e32b59f5f08

SHA1
66cad09dcd97fee93d488dcb3e02b9571ba7c408

SHA256
9958189aa653fc4433ee9f392495418d28ed6aa62b9cf18ac7e4725460ccf8b1

SHA512
ea92050d5420a8eb7a50e2fd18b27f3ee78679f9cb0f1ce4ef073c26f8811c2dbb9d86b41e697ae0a9ec4582d53c81c4b4208768bda64f006adee8811b8b8070

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/A72798DEF4F924983D5A0DB82D383C613B515FF2
Filesize
13KB

MD5
5f08a5ab8dfbf40c4004419964c81401

SHA1
c7d3233b42ffd940122e11f5e67f426509b00197

SHA256
0f1ac594d166fe39c157c355b2522f72a66aef1fbf5fc4e2da26f60566bba293

SHA512
72eba98d395a4fd8339384ac6e3eb8c894df445bf2be93d6b6cfe16016d700ecacf8ba9b370a462b9dc8f376673b192606bb295284fc40ebba809261c999e4e7

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/C4E2BE7DAE371E2DA4773FE7BDA476F3DD46ACA8
Filesize
153KB

MD5
6805bc66f2367021ad6df219b2945914

SHA1
5827d13a574503a98e98d2246ebdcdc2fca7c425

SHA256
d98438f4ea4194a3444a518bc9b55882f0ef545f1be05058f43918b71567b8eb

SHA512
75cbf5e033737b56832b360fd24da3d7a495e06cdac531c3a9eb6f3761e5e4d4d191f8e1a7f73dac1b15a4fe9b0b6d541d9d2efe35e2a71d00bd5dc9cbe6be0b

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/D0F48A0632B6C451791F4257697E861961F06A6F
Filesize
52B

MD5
3550940f4c0ba9cfc3e16d35fa209611

SHA1
865976de7a845f0c3d6dd01742b30cfd6e6dbe20

SHA256
88dc1b64b49c729ccbc0fc421d3a11b9f3cbab0af2530153dbe51238d8bf7087

SHA512
f08ee6540bf7305fb7b6a93c65c0b709a7d6ed09e3daa4ccd409b8de7b3168396e9464f34ff7b9d5137f13635b77c7cd63918a943ff09451dcd23138ea0f7575

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
Filesize
9KB

MD5
e86624966641db1702aa7310695ed71a

SHA1
3b13bb93677e7623169368e389404029629086a4

SHA256
adc1a1086f7f9faa43d37b3b83c4e67b68ca8e4748357ce94017bb73c2c76c4c

SHA512
23216914820bbfb279c47af9c761df39c251b2a6122b45e3f4f357bbb0b842a2824192f8cc761f8a31f990a30c62311db07ea42c94f8bbd778d493f69d30588c

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/E16B5C9951EEECDEA7B9D73E30FB0D7BC60777FB
Filesize
9KB

MD5
2c0ea406c1eb70ddbbe66f62eb3118fe

SHA1
2ee693aa42e786c29929f0cb917b8f4794f30996

SHA256
a4a182caaf773ab0a64d240b7417fa6e103023b72b65ce87934f82a986eecac2

SHA512
8b493dd52aae48a43d9aa97dd87fb9f82a88eccbb4b1fa963fb0fb36e4299d8c45092978bfaa6f197d343fd20d712805d237033a11bf918e2d00d27175286065

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/F210D48319A1879FD1C5213FA010C613B99BA085
Filesize
11KB

MD5
8f72a8cf57fea89ac49a6cafeb1754fb

SHA1
e906bccafe9397c3f85ac570580348519f03a438

SHA256
6aff96e578b39082065833c093d6ac282d86b19d2e5ffe45216e489ca933e3c8

SHA512
272efe4f6e084fa320beafd7ce5e84f6404a0631eee125a535ab4ede2168b4162903511f52b579eafdd14993ba8449ce2c53d8c0718db50d51ca3317e7bbd18c

Download Submit
/root/.cache/mozilla/firefox/no1ybrnx.default-release/cache2/entries/F210D48319A1879FD1C5213FA010C613B99BA085
Filesize
11KB

MD5
e6a0a334d0ba08f90b758569c5b25543

SHA1
707136e22f570c86877f696e9908a26ae3ed7072

SHA256
ac7f6ff897666bb97fd34fc06e0abbe52eeee630362f96ee4ca2c6c8902424d4

SHA512
790b3516c27fe7c2f066b1eadf2a4d0d562805fe2926f9708dcfe021878c6beff65585a0b72686abf4ee6a544fbcc2e5f40952941264acda19cdf7bcf96d75c9

Download Submit
/root/.dbus/session-bus/4816dd152e8c48ff97e9117d197c13d8-0
Filesize
466B

MD5
0411ed0ac6e757b66db75fdd6b83dfad

SHA1
dcb9a48af8002154ef74e66e3ca2991b7f852dca

SHA256
1384b18fefb05551ed7113c28b45f20f22d6963ae9203dc404a26b5ace85ad60

SHA512
44285da774e1771d59bb570fb4622b405af4ec831c4958f3cebc4b126487787ca9a3d803032cd08b8723c1eb98d2fb425dcbab3eed15af9bcee20b87454d46d3

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20240108143603
Filesize
10B

MD5
ac588be086804463ab09d98bb89f6e07

SHA1
a66f68ffa9f568d605730f7beefce38fb8467b5b

SHA256
866857f1d2cb780164b32c2408cc787993ece92684a73f05c1af384278d46568

SHA512
66195dcfc9fdcaa2b74a3813e3b3589951006b06a36c6eaf69fab8be83f42f9a5f6f3ba9adbe112c5a2169e30774f9aafc8095c6186fb06d84754fc678077e5b

Download Submit
/root/.mozilla/firefox/installs.ini
Filesize
62B

MD5
fa69070cabb1592c06cd1295cb7783a3

SHA1
28dae6a3a76223c805da0d4d7d59ae330fa4ed03

SHA256
f9c665285a647826edae4092f9c7e269561e3579f21671b2dde40a70b3c0e195

SHA512
80ef6185c34463d1eaa0025c177b46d4afdd62d4739ba6564dd9a5d530e147f756ee636876e4b236b6a73f9891b25226d5a775c9ece4183011cab4ef3341004a

Download Submit
/root/.mozilla/firefox/k4ar3goz.default/times.json
Filesize
47B

MD5
6ea0bf4ac97308a5541d6bb35f7794da

SHA1
1f2d93abc1454576f1911169c51b6cc506ac0e4a

SHA256
e11e5e2306475624cf3b599d510a7819dd89824a7a422dc45062bdfa1ff8737c

SHA512
4ca5af8739811cb163dba00ac3ceaf613e76586935c596729fb821f45cc0e0351321095abdc1b16a3410ceee634b69413deb5fa986b96e3ccaae44c973db1c21

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db
Filesize
224KB

MD5
cf0ea4e5c2d0029d7bc426eb544eb93d

SHA1
8e410acffaf02610f71530246bb297c7cba2b937

SHA256
608bd7ccb462792d6c69d0f28d2aad273b8d539f029e901f6a770d4f50484f37

SHA512
f583fe21d70dbffe65dcd97ce5d5a3d3a47824beecd1f4ccbfe52e8d31db8db33ed4c50744ef6f01ea4fb6785e4afa4895280272aabd1318a40048f3fd75bb5d

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db
Filesize
224KB

MD5
087dfae945699adcf45343ed4a4aa8ce

SHA1
1250e35c3e76e6db74e858a497868e71c9f250a1

SHA256
203ca170edbb943cc01c36487d3ffa1fefdf23db28dde33dfd2b40a0ddde8b52

SHA512
2bac7c96e17ec81dbc1fa473bd1c02c73ffacacc037593b13b9e7c1a61a98fbf0e1f2024d7a95ffcc2b7f1ff7634d2d72ebf3ec38a580b1ce04922a973674118

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db
Filesize
224KB

MD5
fc57f5e4f6cd8576b18c8f7b2d92d79a

SHA1
3901377737834237b0b110ae34fe8dc2fecb6abd

SHA256
289d29f7b167ee6399cdff29342b2c1880bb8f63d1d9ed970cfe0ce13e48bf9a

SHA512
48efa158de8b0e27dcf98fda96cd4472d664aeb100bb8b5efdb1f6ca297a557844e66f58128bed2ef34e3479f1b65edfa219b1d2db54c22bead249d5cdace769

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cert9.db
Filesize
224KB

MD5
5af26d81c0a2f03f0bdd04e5793048a2

SHA1
7ec89de93f4b45121c34042cbfba2003d1d688d4

SHA256
9ebdb3527a102408f3349bed943bc10f442661d57c2689b5ab5bc325fe52fd20

SHA512
275a3da11e8628d6febb986d55b6845e8a32041c9856a810f32c8d1a85dcf0acc4287bca8a44ecf68652ca57b1e6361ad63bfebd817efac64fa43844fc842a2e

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/compatibility.ini
Filesize
163B

MD5
2d41a6f5736821b90ef44850dd3873fe

SHA1
a47c4bc1431234a5b58e460ede5b571acd38e562

SHA256
b4bf5c8334f6db20ae94105141ae7a721342ddccd94ec65289dc291e76a31814

SHA512
047a1455211e7aa29ef5f32f07c89d8a0c8d86d871bc664e4d8958a2a014dbe32f0613cd9eb66e7307c0e2439f74ca0b829652a52fa48e8c60d64b41f69914eb

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/content-prefs.sqlite
Filesize
256KB

MD5
9d00c3716db8b9c9d51508593d757e60

SHA1
c1cb5093db37d62d22f3083c8fe96631006f6e8f

SHA256
b3199c67fff1807fd8fad7f70345b9c28626ce49a2150f688a239fb010e75420

SHA512
12fee206948261c76f728dc0076f722a4d0574b5c7cb9e7441bb072aae29235c30d79d514bbb0ae3382bbdf06d8d4d88289576e238f94e4731244f8134f3adf0

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cookies.sqlite
Filesize
96KB

MD5
26ff39b359947b71a5fadd950fac34f0

SHA1
66e5830e4dca79225f41adc13a077d8e5dd8084b

SHA256
aecbaf3e1df1332d4f14a11480db712eb4aa91581eb4e942c580bf675f592a45

SHA512
7fae7b9ff4362e12f00acdc898f6f679718bdd28dc959684333086de7bacd162338dc266810f9f3f6dfa3dc228291efd6bb325e2e8573ca0e6a699059a145f11

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/cookies.sqlite
Filesize
96KB

MD5
102a8b6e82208a1b69224bdca8a5b10f

SHA1
8413dc3772127c4159e6d6b51372990a06b805ee

SHA256
5ebf89b32937916a76a8432832040cf0f6b99c2f006cc42f856712d403ec182c

SHA512
49c5c27c6749a7a73b4b944eea64ceb053a272619e6319bfd433ffbe126c8fbccc110961018165a4c7de781a86cf38d2bd9e52ec71b10bc73c9fd05fe841a46c

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/favicons.sqlite
Filesize
224KB

MD5
aff3f84fda6516b87050f171d68531ea

SHA1
6b82d182412601c057bfc591cc6b9a8932c84c73

SHA256
5203714a71df85f81969a193cac50befa4b1e70841b9b2d3ea348d3b99657172

SHA512
aacbaa66d86f8b3f299cead818a0883bb900588da822148b4ac7543a0fa4ee399c14a69534ae55bfd0e7b18630b93f04e0e0174b7d586e0d536c20760b5d65d8

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/key4.db
Filesize
288KB

MD5
93faec84f088864be211d729e5bbcf4d

SHA1
46844ac56a6072e03e79738f438f30c6d3189651

SHA256
b9270d0b3d776d1767015fca6ab9a648d2e9c83f1f99c0cddcffea875847e696

SHA512
76486ff690dcca7a29551c90b8654209c3c683005c5f5d9036c7f435c3704d586643f2e0f36c467d5ba2311c62c0bf7f163b5cddff0be3e047a78ec027513e92

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/permissions.sqlite
Filesize
96KB

MD5
652770017ccd3217c70066cdb7213d35

SHA1
61bcaddfc3b435b399490896b7d6055269ab6653

SHA256
660ccd2cc3805ef44ddd244134e82179df1708a253571afb5062d1b38939bd9a

SHA512
db4b111d760e1a67d63248a677e8487a2ecc31e89362641bcde5ef1d8bbf893b57ad70922fcebbc961d686520361f5bf0c6b7c217ac1b9164e3d275be2dc9db1

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite
Filesize
1.4MB

MD5
b23d273848904e3eb27b71e3dc65941a

SHA1
253b2ee059f4d44697e14fb17dc74855834e2d98

SHA256
b21c9c202b9749be593555412d8e81e93224e317e5f9797df952e9af21a767fd

SHA512
5abe3c750879944e2593354facce41d438576f57f454dec2bfe750d9376f3a9b0fac3278c91e1fb8869d9b5282aa2980379ea88cdc3bdc47b1ea8368c0b53d36

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/places.sqlite
Filesize
896KB

MD5
0b2699cce488f767314590b2a316f0c8

SHA1
9f614a49727f1a5b779c28d851ccbd29e730889f

SHA256
41ef073be00072d5bedd74bdfe909626fd928600ca9a5a0c13d89c08af3c2929

SHA512
42f80a016677751d26d7f9d14fcb5b5792ecdbe317b4562a172690eea83617555cb881dc21dc64875a651876a47b7442ca22d990fbba41c209a99488f3ce5715

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
1KB

MD5
5a6e5ce96fb9b42b4b4fe806a20ffd63

SHA1
4a62631c1b472c4b4010bd046505987c0a9e673c

SHA256
607b9534ca5cf1835a491264e425f5e97a71b3b08a303968e54a9d2244680974

SHA512
98112508c0b29e92def1544862da31ba11065e7e9f02616a20cc18fcfb6977150f677a7802dd7ec8633205c1c8a6447126ee43b6a9a9e4b34ab63ce078d1917d

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
1KB

MD5
9ec5ce0a03952ca070ee55843c49d574

SHA1
e5fbe5223631ea0bb8486c6f3fed30db6acfcb28

SHA256
f007d4e8a82c9215defbd282a200c54230ccc38b9969445d67467e5b758e7e84

SHA512
2de0fdb9efb6e1b87f6c997d02e13c76f4fb744d9071fa80a570bf6e72cb27ec28bcc5d01253064bbd2d1096d751b7ce9a0240729d6743e27f24488805be671c

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
2KB

MD5
9a2fa0c0d2b366c0c70e664857bc6b9c

SHA1
c4df6287da976621005df6812a00a0d5ef1bfab2

SHA256
0c8e131581c192526562a0c91314d6ea85272994b93784ee267243b2d0f4a7e9

SHA512
921626072ea5ed216089f9bc9de4b2bcf3963819ac4ee678ad3292741b840da5dff342966a22d3dd1635a6899ee19ffdb413f3d4d2e44afb742b5ad29751eb6f

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
2KB

MD5
1bf942edf6def5d28d077b6f3d419388

SHA1
b69b17092c1cd91ee1bfd8a511420a4e5a7b80cf

SHA256
333ec6ba98593306967018a1b9b0e270621573c17e534be86ea117e7d6c867d0

SHA512
496e5da45c4cd9091cab96d947c4defd6e7ff26071a062766361169dd70236c212a0fe6d08b72751212d0adb4f6d722d4868fe36181d49aee626f92c4a62a6f3

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
2KB

MD5
b3245f21311282c9841c1f8ab0646f2c

SHA1
f79f1aec316810c99147bbcba4a140dd156f56e4

SHA256
04c5c68f528868b6bb25e6a2d4a0a8e6bacc3410851aa7a1a970681adb12d720

SHA512
4a7fa92886d840bacbdd959a77da2fc26747ad6b095ae59adf21cf37eea2164f09ea72aac8fef2154d602ae3224e325ab9d1e38781e5dd837227a85d5ac6bae1

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
2KB

MD5
162e3f9c774dd3f5191fc1f4988fc882

SHA1
7f205da26173c53b75d19960db636e1e347e010d

SHA256
fa13dc74b2a2a65f5c9e545806846bd9ed873b4bc7cb51b078d1162d350324c9

SHA512
f327f493ff8d3c71949fcbd8be65fadafaa8430f481b765c7abb68fe44b825fb8bbec20690495c47bd09f0fa9fa0ea298ae6ac7f4aad6c808ce971b4f8ad691c

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
2KB

MD5
4e76d433b75262e11a45d1acfe4326bc

SHA1
fcedfcc104178da17d5dbfec2f37bc13880ecae8

SHA256
33b04bffe4945f5d266882f27f2101c47e6add76ef90923c5aa812296d77955a

SHA512
cf8c49a44aa2a7f2df62b10ba96616703b5b799291849d96c4206ab0a76cba247935291b86d78295281f2a95ba64ab73d04503868307cd4f68995fe849496030

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
3KB

MD5
e97553d3878c08deea434b4279a4e0d8

SHA1
76af92a8713439c6d15ee35ce573775ede55b210

SHA256
68e85981ef649a3c3f5688d955447395602ede43e011c512c9f829534b493e22

SHA512
3521867747b60a71ef5ce3515e0b21993b0ee0d3fb06dcfb4214d10333e3c9ff0dbdd435a1175e960cc74d8f3fc997ef697cc49fe3f78f02ba5554907a12f698

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
4KB

MD5
7c65e96ba2171256cb64840ae6d7a67d

SHA1
41c1fdc17e8dfa0d736de1abcf92f2d0d7ecccab

SHA256
f4dcfb4f1af1f1247856db6af792aa62c297ca44b21352e9a5fdae95ab61d685

SHA512
723fa2be188a30a6739b1b63d4d1d3f62ad26dc1c0787283143a59722af567bb79936ec70cdbcf3a55f0175ed65df49faf7ffe2f43c8fb3aca467cfc9854a402

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
4KB

MD5
ca68c6d310dcf6a5bcbc581a595a5dff

SHA1
cd1b2c73e9468b703947ab9a94d84a1ec1cd2311

SHA256
ea83ebfa33e6527a4fec422dadcb5e732e9557249c6441cf98159397288eb83a

SHA512
ef620fce9293f64474aeb7b3215783dfc9fbc506f551befacef02060b4d5151b9d0359e7bb9da9d9292755ea45a5a23b704ef84c3d7810f2a436c42e7811f218

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
4KB

MD5
d212dd517c4652e681e68bab84c207cd

SHA1
a242137b502fab00a599a9c0013f6eee1d86b621

SHA256
be0453dba6b1f4bf9fc0330108ba5ebbcf1d98835056a2e9dd8f899023d81ca3

SHA512
0b4398dc176c65c1da7eec7077728d3f36fb7413810d8a81392b0360392ae3da10c2f195bf5bc9e8a93a64e19830db33db8b77179125c00fa9e3e77a71bc2eaf

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
4KB

MD5
eb7edf826072f7606e8680a860e6b409

SHA1
6fe03291186239a9c242a25a84e6e00aaa08bc1b

SHA256
dcae7fb290bd1cf1c21f2d2cd5e08b89f46a86982ab6a70934cbd1d23fb7cf5a

SHA512
d3d6b6e9ce5403164f12737dd827db165fba01c8e0b01a80a0cc719313b18e81e8f8d2e9a9618f25f2e841be84fd7b93248de97e4e8e251cca5cb559586c0cdc

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
4KB

MD5
e2b43e21fa97890393614ff16fb0a3bc

SHA1
8653d26a1129249d6b6bee03f7b2c898680cd4a7

SHA256
0f2490a8aa2ac789bc745bdc446486d580babe1f9c2cf9dfe5056c5e9c98bde4

SHA512
d2746cb5dfc32b0b084dc868ba7d7a1ab649964d1de30ac831d42f05818e3808a8b2ebb1b5813ecf3c6cca7cd8dea5682f47bc6d3ad7df97ee680390fd099e82

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
7KB

MD5
5dd23610cb333312c665be9afd37e179

SHA1
4f135af7cafcecc001fd61cf29b02fcfb7943cf4

SHA256
c85ac33ae0b69e88f7944f827e79c239f9186e0ca6a4baf8172ec1734aa2b812

SHA512
a797e2814049fe311d44cc7426ca5852a5bf409020f48fd3aa29b25d879584982504057ffdf4b5ff6e85ecba926c21749dceea79e37506999be0ec279017e457

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs-1.js
Filesize
7KB

MD5
e95bd06185b8f50c84426bde344c2c81

SHA1
1f4c9abc7e4f9898500f61de51ee5466964fddfc

SHA256
6010cae6d2386bd764702e22277d1f211551ed3a3c92faeac37c36b7eb183f1c

SHA512
90b4419d5195efa2f08c4d5ebdee4296964309a71ffadb47b6377e9d8e4ddeac9b8127179153b99ddd9e55592c512e23806c0a99ced675e187b681ecba1ae848

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/prefs.js
Filesize
656B

MD5
8a3fb2ff88ed8a97c6528a1559029043

SHA1
77fb453528520bee52bb4369fe541d7b7144f64c

SHA256
e1ddb5045ec6fe75f49e0d3fe787eceab8ec3d934dd50825a2cc8546ad532e0f

SHA512
06754a0d62cdeaad085cb5b5ff834999c77b64738093e4301c1a9c29042292280b531856355a96c56fb5eb9a3729a09319fee9de4b1c95748a9616d46d695439

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/protections.sqlite
Filesize
64KB

MD5
1a11a5fd63e6cfffb1270d7e592c0c83

SHA1
a4e5d648d9a2166ff139b0ef5f234eaea33f4387

SHA256
4ddad4bf221e1c3d071054a9859deace3996cc445ddee61fba0b388e4b1b378a

SHA512
54ed0ef9e4d5810694aab71106451e5deae19c6eba79d42313398d691a1a5d8a1422423ad7589249c6e215466568350b84b68ef2f44105945962694745d91e07

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/ls-archive.sqlite
Filesize
96KB

MD5
e1121e3dd3c8a9c384f879bdddcff219

SHA1
625f25a1a5ff8527ab3105636fa7aecb9affd234

SHA256
766b9f50254b4e5526b0cde2911512956262596d8937f8630805d3c70802a066

SHA512
03e1cee2e75b2b609b8344a40995de09de837e940d2012f2fea65d9c70eecbcd3345b66b852f32211b38b06a4370f06f02ca7521e29e7113e2e12a6a7752be31

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/ls-archive.sqlite
Filesize
128KB

MD5
0d2b18bbf091633c4fe1ebdd197dfa15

SHA1
c150dc37042d92d30efed6cbc1b536eb66ec1a3e

SHA256
fe63ee867e0f229a0bcc48b771afeec394c362ac6d0c2bd6907c7202097bd228

SHA512
59d202bfaf236bdcfc05a3e148a773d15a3bdff23be26fb2cbfd059fee6c4a516c7a59de0a3bc97df1419c34464e1346354979ddda1062101121522f22d8156d

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/.metadata-v2-tmp
Filesize
36B

MD5
322fae42b7e29d37e797f0631a620a8f

SHA1
4ac43d89062daf87e64eb8477ca1fe186a35f830

SHA256
ed7bdbbd84f83197c2bbd5b80f9479641b539699aabe93a3b79fd4d300f8f2da

SHA512
8754563ee5a1d1df01e39d11196784a9f8923f049f228c4398f860e4e6c30725761225ba24f02c5749c8673d652d44a1ae9463f026100bf08c86cf5f84f3b116

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
44KB

MD5
488403dd59d861961dbf2e5317cc6e55

SHA1
bcb13cf819bdc370762237a075f14a9be0728a50

SHA256
8645149962df6c816291521b6cb45e9acf79da6bdc3a727ba00c71eb720de4ef

SHA512
4e60bc58fdc1ffe3662b83fc9af3e0ec5af90eeb25da8e60a70717e3588676e135f6cc5a8d57a37c2cd2ce3a3661e665e2688d00799dd834945d5f0964750805

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
12KB

MD5
692671e3cd638c3be8ea9d113ac44f84

SHA1
2c13d7197b996b139c4ce18ed66b298e0082ce4a

SHA256
09427a408effe722ee1f3612838ea52025bc21743e2afacbedf6a69d6b264cfe

SHA512
cd03937ec041e91f2a08bc19cc204250b428a2a81be072558c147341ab83016bf371b4b6597bb4913cbc230429062f95b5a4d1da8b634f8546eaadd0c482423d

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
16KB

MD5
0944b476018785d30d47c5c4a078af23

SHA1
40b83ef1c811252f1fe3805e1600df0191c0d581

SHA256
f19e7a53964a1b3a997d68d646a3eb3e46ce5b6a8f12dcbd929c84c2923da9e2

SHA512
3e6c28d7a966d68ef308d739d7b70c974c035ea38171ecab5d2fdd9a100e523dfac127d475ab558904dfa65bf9e60f146f703bf3733228a54d12231234da2f47

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
44KB

MD5
f1cd629017b1fe58fc80953ebd4754b6

SHA1
01e02178484458797c2b682325b26b2633fe8466

SHA256
81bf3da297b9ee8270bea383d9479cd7951e35f552361230358e3a35e1f44567

SHA512
afb775074af046014236a312865a1811de3bfb97f8df057541401867140fcc236259ab237712a7d3bc012ff84cf90330e4e122374cd09c194c4c145f575fb95a

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
12KB

MD5
63d8f7fba1b2bd02ff56f9274919e173

SHA1
333fecf979d3662bcbefce0e671cf19acdb121cb

SHA256
de4a6db639ad516e99d23e58616cc3c5ec33dc2a7eb75c32c4f24c4dd473c826

SHA512
7317d8c0519156aa9ec2b69bf32e5554a4447feb1f4bb00eb0fe75a5856c10b20da36b5b932d09ca4e023ea9d150a67b27a06da509759763fe818ee7849b1be4

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
16KB

MD5
85d0effd2ce992964a0e672f1601dd48

SHA1
51b7e037906f9a39f7582de9e4fd19c2352c8817

SHA256
558338c29619a85fe2e93600e80540c6715ca0b7f020685218e5c18201da067d

SHA512
4c20a87dcc03d72c14dcd31d91d7640bc2ca3cdd38ed67a06d477c7150aee7aec82a37afd0aed123aac01cf438c5f5d21cc3ce0a1e5819e7f9f67dbc53de156f

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
44KB

MD5
1ea539584c41fd171d307fb9e740d499

SHA1
de3d1a3d6a0173bcd30c89f148cd732d0ae614eb

SHA256
aaa3461e12a1343eb5803894e1ef6894014b75b26ef264f29ece30b1cea3aa83

SHA512
22b145864127c0f223522016c6ba0a67e06a36aeba135e546f4d77000f436d5060064eb988b7aafdb451e39f70d0afd20313d15507dd531234ac25d60e9d935c

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
12KB

MD5
91f6ff262191b22b8f6405fddca40199

SHA1
1db70acf8ee64bbf13e79e0be0ea29258fa46d7b

SHA256
1a2cfbe34a4b2c1ffce3eb3021d0728499571fc4a86d92cd7d99a3529a81cecb

SHA512
2133b02920276f5219c78e62b968a6dd4297dd0ec3d07de1bb91b2368cb2562912004e4957232dd03a0e5f5e152b96bd2ffca68a984bc75376b841136fcfb05e

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
16KB

MD5
065351dfddedab8a065d3cfff5bc7024

SHA1
47f7d14e0b15664b53906a23c4380a080a1a30d0

SHA256
f678b19e9d8925843ce4e8e023726923ab300b5a522935ca7de93cf0cafe54b3

SHA512
c4d71142e5a13fde03aa580544c73cb5b3319db7cd12ba14b8868c756d6ae0aab3a4aa7425b3423c2c87eac34c670af3aa74ffc6d581e1b99e9c3150a54fff07

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
252KB

MD5
870f27dccc6c4df8ea8543436d6d8f21

SHA1
71757bf8872afcd0815fdd42bee14779ec697351

SHA256
1189276151c1370bdbccd0d4478b726b87292815dd4ffb85041bf4f8d2ade8f2

SHA512
56df4deecdf3fc03e1b43401d6ac91b3a3636c192b6c26e1157345ba812ff5aaa8b6f6f513e3e538f535887cfb3ab6abcd94c57c8d38c4ad34ea8c6d1132e006

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
44KB

MD5
225fe36c4bb990de9670b27368d655a2

SHA1
1dc382bec9af9b4bd0308dea1908ab6933834828

SHA256
2185235a458ef8924a1370bb956dd1d65d1f7bbffda08289275e072b65d5d1db

SHA512
11eb31a930a336c13869b0d385df555d7fba32ecea26bf513398dca2a35439643b0896a94c4696ffb439eef18b7f85982155dd12beddef784fe4ed1e86d2d1c2

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
12KB

MD5
12845f7ca9399b6a477a6207b5797168

SHA1
5ee4e0a4af7a3ba765da11272bdcfd09c90cf5f1

SHA256
249ae269396de6dec1d7fa44858ea028fd247d12caba651fe6c8b9f43c10fc01

SHA512
b2ca7e4acc663a620a1249f0573056c31a4a30a1cf5ec22b8533f0d69ce0ff066956db8b650c714a91feebc99aba2d99c11bc246fd6a318899c6757e50ce85b1

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
156KB

MD5
dc176eae22c40c7eb8ce3c1d347f8c8e

SHA1
45aa92213b7a0efb93ccbe26952af5a86903a01e

SHA256
f3269518c15fbfb7288900eea60a2a9a750ccb86fb428172a28f720287ea2bdd

SHA512
9c80fd9fb960d10e4c5e5fb7495c300775b98ad1dcc2a1de593cd5e9e25b162c28360fdc2aa37d0559546c50df39697a6e03c3c9243e418ffcaf2dc35e702357

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
116KB

MD5
bbe9e4471c97fb1b270eb793922a00e8

SHA1
a1da47669a2b512be64ba97e8bbd587887d2c24f

SHA256
dedbbbca17668696789b6525ec93fadbb5731e96df326c7d84ce355fe0ca1bac

SHA512
1df28b24c05bd0931c3fab72bf6283d4a4df4253bd28060bf9abaf8fa0b9fd91e7790c28d7972287ac82a1bf04eecd3fab8acdaa26dfd394b3493280c7474f1d

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
232KB

MD5
84520e2ebe4f93fb1cf5344a6e4a82ad

SHA1
8f5ca99b5fd5a03ecc300634c9b197c9f2af9591

SHA256
6fd0c4cf15d1d14ae9594b371aa2bc52fca0381690a8292aaaaeed80bd0239b3

SHA512
6497456695b0582fd328d8654f58f18c600e1f52c4fb40785b720e24dbabb58e6446cdc6f19b776b086a4b374b98ea4c04748ff8971457d959ffed68e9718c90

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/times.json
Filesize
50B

MD5
1bfce0cd173778a62faf29774e37ab24

SHA1
90807c6b79cf0168c35b9237b0470994fe06214d

SHA256
c589267fd05f6e7e43bd233eb0d5eb24afe7a5094bbb76332705f378771e1985

SHA512
2fa7d30393a6b386144d76bc6c20a7ff66752602388969565bbf34096dc1ff13e64a5d88bfdb0c845a5ac5a05de15d6e502894d2f4b131a3d6794361b15e2cdc

Download Submit
/root/.mozilla/firefox/no1ybrnx.default-release/times.json
Filesize
47B

MD5
9bf9d291215125451576f1bcc6762e01

SHA1
be65820d5fff114e100278c648346d6f894086ed

SHA256
1187e82688471c191a5e857ff8e59fead2bc9e270d9576c996470f5359b32b4a

SHA512
34862ce7c1316b4bb05d2e44f671ef87e60d6117b6ae330b3472199974858cbce0a8be8be46ceecfedddbcbeb71c74d56eacd49667ef4c9ddcf751738d5c16f4

Download Submit
/root/.mozilla/firefox/profiles.ini
Filesize
259B

MD5
c0bc9b381d798a1ee38d1712eff8f8d3

SHA1
15bfec57e74ce405a8c4e7f734fb5c9dd92c5569

SHA256
b9295d95d6cc2b4094f61515085867e2f79a9c786c82709987099712a56cdae0

SHA512
db2a2ee8cfdb7d62a6ff54391b12b54725874f5692e514407c4affd5b2d4ad83d3e8c18f43621d78f5894f75d4869fe7a1c848224e53d3058931a2c4758f00d3

Download Submit